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ABS TRACT 


Aircraft combat survivability has developed into a 
discipline of its own. This thesis presents a brief over- 
view of the two integral parts of survivability, suscepti- 
bility and vulmerability. It examines the probability of an 
aircraft being killed given a single shot fired by the enemy. 
It further examines the redundancy of critical components and 
the effect redundancy has on the probability of kill of the 
aircraft. Several numerical examples are given. The thesis 
also examines the Antiaircraft Artillery Simulation Computer 
Program, and the modifications required in order to intro- 


duce component redundancy into it are developed. 
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I. INTRODUCTION 


Since World War I, aircraft combat survivability has 
become a factor of constantly increasing importance to both 
pilots and aircraft designers alike. The definition of air- 
craft combat survivability which will be adopted in this 
study is "the capability of an aircraft to avoid and/or 
withstand a man-made, non-nuclear hostile environment” [1]. 

Given an aircraft flying in a hostile environment, 
there is a probability that the aircraft will be hit by a 
damage causing mechanism and a different probability, that 
the damage causing mechanism will have the catastrophic 
effect of killing the aircraft. These two probabilities are 
of paramount importance, and they will be given special 
attention. 

The probability that the aircraft will be hit, Pa 7 
is usually referred to as the susceptibility of the aircraft, 
while the probability that the aircraft will be killed, given 
that it has been hit, PK /H , 18 called the vulnerability 


of the aircraft. 


A. SUSCEPTIBILITY 
Assuming that the enemy is alert and possesses weapons, 
aircraft susceptibility is influenced by the enemy's ability 


to detect, identify and track the aircraft; launch and 





direct threat propagators toward the aircraft; and detonate 
them at or near the aircraft. If one identifies two phases 
during the flight of the aircraft, i.e., prelaunch and after 
launch of the threat propagator, then these abilities can be 
measured by Pros the probability that the aircraft has been 


detected, identified and tracked, and by P the proba- 


D a 
bility that a threat propagator is being launched and 
detonated at or near the aircraft. Thus, susceptibility Pi 


is given by 


P= P, * P (1) 


B. VULNERABILITY 

Aircraft vulnerability is primarily influenced by the 
aircraft's design. Any survivability features built into 
the aircraft, such as redundancy, armor plating, and the 
ability of critical components to operate after taking a 
hit, will decrease its vulnerability, P 


K/H ° 


The probability of the aircraft being killed, Py , is 


the product of its susceptibility and vulnerability. Thus 


kK = Py * Pe (2) 


Py is related to the probability of survival of the air- 


Crart, P. , by 


P_ =1-P (3) 


————- =e 





This study will examine the computation of the proba- 
bility of kill of an aircraft and how it is effected by 
redundancy and the number of hits that the aircraft has 


taken. 
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II. PROBABILITY OF KILL GIVEN A SINGLE SHOT 


The probability of an aircraft being killed given a 
Single shot, Press , 1S based on the assumptions that the 
aircraft has been detected, and that a threat propagator has 
been fired or launched. With these assumptions, the Proc 
becomes solely a function of the fire control system's 
ability to direct the threat propagator in the vicinity of 
the aircraft and the aircraft's vulnerability. Thus, the 


expression for the Puss in a one-dimensional analysis is 


Piss -| pH (x) * Px sy b* ax (4) 


and in a two-dimensional analysis is 


Proce -| | pH(x,y) * Px su (XY) dxdy (5) 
"0 


where Pry () is the probability of hit density function at 
xX , and Pky *) is the probability that the aircraft will 


be killed given that it has been hit at x. 


A. PROBABILITY OF HIT DENSITY FUNCTION 
The probability of hit density function is the mathe- 


matical expression of the ability of a fire control system 


1: 





to direct a threat propagator in the vicinity of the air- 
craft. In most Piss assessments, the normal or Gaussian 
density function is used. If the propagator paths are 
uniformly distributed around the aircraft, the one- 


dimensional circular normal is applicable. This function 


has the form 


2 
—_ _ = a 
Catan” 2 Be eZ ae ane (6) 


where r is the propagator miss distance (with respect to 
r= 0), and o is the standard deviation, which is a 
measure of the dispersion of the shots about the target. 
This density function P(r) is used to determine the 


probability that any shot will have a miss distance that 


lies within a certain band defined by ry and ro This 
probability is given by 
r “2 
2 2 
P| -| % ve 
H exp (- =-5) dr (7) 
Sal Dae o? 20 


1 


It 1s important to note that the probability that any shot 
lies within the band r, = Q and r=° is unity. 
In the two-dimensional analysis, the bivariate normal 


distribution in the x-y intercept plane is used for the 
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probability of hit density function. This two-dimensional 


normal can be given in the form 


~ if Ll xwUy yy 
PH(x,y) ~ 2ma a, °* #1 oy ) + ( a (8) 


where oO and o., are the standard deviations in the x 





x 


and y directions, respectively, and Wy and My, are the 
mean values of the shots about the x and y axes, 
respectively. The mean value represents a bias or aiming 


error and is given by 


N 


N 

L > 
BL —_-_ —- > ’ Hy = —_ y. 
x N #1 1 y Dee. af 


where N is a large number of shots and Xs 


x and y coordinates of the ith miss distance. 


P va are the 


B. PROBABILITY OF KILL FUNCTION GIVEN A HIT 

For contact warheads, the aircraft vulnerability can be 
represented by the vulnerable area As where any hit within 
the vulnerable area causes an aircraft kill. In the one- 
dimensional analysis, the vulnerable area becomes a circle 


with a radius given by 


13 





and the PK /H , or kill function is given by 


P = 2 ter O<r<F 


K/H Vv Vv 


(9) 


This type of kill function is referred to as a Cookie Cutter 
kill function. 
Another kill function of particular interest has the 


form 


K/H 


2 
Payy = XP ( - Sy) (10) 
ry 


and is referred to as a Carleton kill function. Note, 
that once again, the area under this PK /H curve is the 
vulnerable area A whe 

For the two-dimensional analysis, the circular Carleton 


kill function becomes 


2 2 
=e x 
Pasa (XY) = oe | (5) + (x (11) 


whe re r? has been replaced by x? + y? in equation (10). 
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Substituting equations (6) and (9) into equation (4) and 
evaluating the integral, the one-dimensional probability of 
kill given a single shot for the Cookie Cutter kill function 


becomes 


P =] - exp ( - cas. ) (12) 
KSS 216 
When equations (6) and (10) are substituted into equation (4), 
the one-dimensional probability of kill given a single shot 
for the Carleton kill function becomes 


A 


V 
i = 5 (13) 
KSS 2 


A 
(5) + 26 


When equations (8) and (11) are substituted into equation (4), 
the two-dimensional probability of kill given a single shot 


for the Carleton kill fwnction becomes 





A 
V a 
A 
‘Ee. ie. 2 u 2 a, 
a or ox ‘ 27 °y ay 
2 Z 
If one assumes A_<<o A 10} then 
Vv x y 
2 2 
A ie) 8} 
Vv i x y 
Puss ~ dno. ow |- + ( a :) | (15) 
x y oD o., 


15 





Thus, according to equation (15), P is a linear fwction 


KSS 
of the aircraft's vulnerable area. 
Detailed evaluations of equations (12), (13) and (14) 


are included in Appendix A. 
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III. REDUNDANCY AND THE Puss 


As it was previously defined, vulnerability is the 
inability of an aircraft to withstand one or more hits by 
damage causing mechanisms. The higher the vulnerability of 
an aircraft, the worse its chances of survival are. Thus, 
one might say that vulnerability is a disadvantage in an 
aircraft. In order to reduce the vulnerability and overcome 
this disadvantage, designers are utilizing six vulnerability 
reduction concepts [1], one of which is component redundancy. 

An aircraft is comprised of a multitude of components, 
and each one of them contributes to the overall aircraft 
vulnerability. Some components contribute much more than 
the others, and for that reason they are called critical 
components. Thus, a component is categorized as critical, 
if a hit by a damage causing mechanism on the component 
leads to an aircraft kill. If an aircraft is comprised of 
N non-redundant critical components, then the aircraft will 
Survive if and only if each of the N_ critical components 
survives. Thus, the aircraft's probability of survival 
after the first hit, P_‘) , will be 


(1) _ (1) 
P = P * Py 


(1) (1) 
S S} obs ° 


2 3 © Sy 


iy 





(1) 


where aa , P (1) 


(1) e @ Po 
2 3 N 
ities of survival of critical component 1,2,3,...N , after 


ame are the probabil- 


Ss 


the first shot. If one takes into consideration equation 


(3) the probability of aircraft survival could be written as 


) (17) 
1 93 jm} Ky 


N N 
eCls e 5 y T (1-P (1) 
(1) is the probability of survival of the ith com 


i 
ponent after the first shot, and Py (1) 


where P 
. is the probability 
of kill of the ith component after the first shot. 

If there are sets of redundant critical components, the 
validity of equation (16) breaks down, that is, a hit on a 
Samsont critical component does not constitute an air- 
craft kill, since another component could sustain the air- 
craft flight. This can be best illustrated by the following 
example aircraft, which is comprised of four critical com- 
ponents, the pilot, the fuel tank and the redundant set of 
engines one and two. (The aircraft is assumed to be capable 
of flying on only one engine.) The probability that the 


aircraft will survive the first shot is 


p 1) 2p 1) « P. (1) @& P. (1) (18) 
p E EE 


te P_ (1) P. : (1) 
F EE 
of survival of the pilot, the fuel tank, and either one or 


are the probabilities 


both engines respectively, since both engines must be killed 
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Simultaneously in order to kill the aircraft. The pro- 
bability that either engine one or engine two or both 


engines survive after the first shot is given by 


a) ay P. (1) yp ¢2) (19) 
EE El E2 


where P and P 
Kei KE2 
engines one and two, respectively, and the product of 


are the probability of kill of 


PL and Pie is the probability that both engines will 
be killed by the first shot. This last concept is an 
interesting one and will now be investigated further. 

In the following investigation, the one-dimensional 
expression for the Cookie Cutter and Carleton kill functions 
Will be utilized along with the one-dimensional probability 
of hit density function. First, using the Cookie Cutter. 


approach, figure 1 represents the situation for the vulner- 


ability of two separate redundant critical components. 


1 


K/H 
probabi lity 
of hit 
density 
function 
» PH(29 
D9 A/C centroilcd x 


Figure 1. Vulnerability of Two Separate Redundant Criti- 
cal Components, Cookie Cutter Approach 
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In Rvire 1, the x-axis represents the aircraft length 
(vice area, since one-dimensional analysis is used), a-b 
is the vulnerable length of redundant component one, and 
c-d is the vulnerable length of redundant component two. 
In this approach, the kills of redundant components one and 
two are mutually exclusive events; if component one is 
killed on the hit, then component two is still alive and 
vice versa, since only one vulnerable length could be hit 
at one time. 

With the Carleton kill function shown in figure 2 
everything changes. As seen from figure 2, the kills of 
redundant critical components one and two are not mutually 


exclusive events. 


Probability of hit 
density function 
K/H 


Carleton kill Carleton kill 
function for RCC1l function for 


eaeccr 


i: 


A/C centroid 


Figure 2. Vulnerability of Two Separate Redundant Critical 
Components, Carleton Approach 
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A hit anywhere from -= to +° will have a non-zero 
probability of killing both redundant critical components. 
In essence, the Carleton kill function creates an overlap 
of the components. Thus, one hit can possibly kill the 
aircraft because both redundant components can be killed by 
one hit. 

Returning back to the example aircraft, equation (18) 


becomes 


aa) wae an, oe (20) 
p 1 2 
This equation is valid for an aircraft with one set of two 
redundant critical components where only a kill of both of 
them will result in an aircraft kill. There are some 
other combinations of redundant critical components that 
one might encounter in a kill tree analysis. They are 

(1) A set of three-redundant critical components and 
only a kill of all three will result in an aircraft kill. 
For this particular combination, the aircraft kill logical 


expression due to just the redundant set will be 


A/C KILL AG = (RC1.AND. RC2. AND. RC3) 


while the probability of any one, any two or all three 


components surviving the first shot, will be given by 
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=1-P (1) « p (1) « p (1) (21) 
RC RC1l RC2 RC3 


where PL : PL - PL are the probabilities of 
RC RC2 RC3 
kill for redwmdant critical components one, two and three, 
respectively. 
(2) A set of three redimdant critical components and 


a kill of any two out of three will result in an aircraft 


kill. The logical expression for this combination is 


A/C KILL. = (RC1. AND. RC2) .OR. (RC2. AND. RC3) .OR. (RC1. AND. RC3) 


while the probability of any two or all three redwmdant 


critical components, surviving the first shot will be 


(1) (1) (1) (1) 
P =1-P * P -P * P 
ore Kect Kaeo Ke Kec3 
(22) 
(1) (1) (1) (1) (1) 
=r * Pp - 2 * Pp * Pp 
Keel Kp3 Kel Kee Key 


(3) A set of four redundant critical components and a 
kill of any two out of four will result in an aircraft 
kill. The logical expression for this combination will 


be 


A/C KILL, = (RCL.AND. RC2) .OR. (RC1. AND. RC3) -OR. (RCL. AND. RC4) 


-OR. (RC2. AND. RC3) .OR.(RC2. AND. RC4) .OR. (RC3. AND. RC4) 
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while the probability of any two, three or all four critical 


components surviving the first shot will be. 


io. (Ua, (PL, W., W 


Src Kel kK Keel Kec3 
(1) (1) (1) (1) 
- Pp * p - Pp * Pp 
Keck RC4 kee Kec3 
(1) (1) (1) (1) 
-pP * p P * p 
Keo Kac4 Krc3 Kara 


(1) (1) (1) (1) (1) (1) 
+P * P * Pp +P * Pp tp 
RC2 Kec3 Kr KO Kec 


+p Dep Yep Yep Dep Dep W 


Kea Kec3 Keca RC2 Kec3 Kec 
(1) (1) (1) (1) 
+ Pp * Pp * Pp * Pp (23) 
Kec ken Kec3 Kees 


(4) A set of four redundant critical components and a 
kill of any three out of four will result in an aircraft 


kill. The logical expression for this combination is 


A/C KILL = (RC1.AND. RC2.AND. RC3) .OR. (RCL. AND. RC2.AND.RC4). 
~OR. (RCL. AND. RC3. AND. RC4) 


~OR. (RC2. AND. RC3. AND. RC4) 


while the probability of any one, two, three or all four 


redundant components surviving the first shot will be 
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0) a es 


RC2 RC 3 RC4 


— ss. Cty 
RC1 KRc2 KRo3 RCA 


(5) A set of four redundant critical components anda - 
kill of all four only will result in an aircraft kill. 


The logical expression for this combination will 


A/C KILL. = RC1.AND. RC2. AND. RC3.AND. RC4 


while the probability that any one, two, three or all four 


redundant components will survive the first shot will 


Pee (i) (1) (1) (1) (1) 
P = l-Pp * p * p * p (25) 
SRC KRe1 Kre2 KRc3 KRc4 
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LViece & AND REDUNDANCY 


K /H 


The analysis done in the previous chapter, though 
necessary, was limited to the probability that an aircraft 
is killed due to a single shot. A further and more 
realistic analysis stems from the fact that in any given 
combat scenario, an aircraft is likely to take multiple 
hits. Thus, the total probability of kill of an aircraft 
that has taken multiple hits will now be examined. 

If one assumes that an aircraft consists of N_ critical 


components and that it has taken n hits is given by 


~- n , 
Pe (n) 2 P (1) + P. (2) Pe (3) *.-P. (n) = ][ P (3) (26) 
i i i i i J=1 *i 
where P. (1) ’ P. Se ; P (3) op (n) are the probabil- 
i i i = 


ities that the ith critical component will survive the 
first, second, third...nth hit, respectively. Using a 
parallel which may be inferred from equation (17), 


P 


. (27) 


e i S 
(I). OS ee 
i j=l ail 
where Pk /h, is the probability that the ith component will 
be killed by the jth hit. In a similar Manner, the total 
probability of aircraft survival after n hits can be 


derived to yield 
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n 
Pp (noe Tl 


fe 
; 4 -*. (28) 


whe re som is the probability that the aircraft will be 
killed by the jth hit. 

In the case of an aircraft consisting of only non- 
redundant critical components, the PK /H does not change 
with each hit because the vulnerable area is constant for 
each hit. However, in the case of redundant critical com- 
ponents, PK /H changes considerably due to the increasing 
probability the redundant critical components are killed and 
thus, it will be studied separately. 

The simplest approach to the PK /H with redundancy 
study is through the use of a kill tree diagram. For that, 
assume an A/C consisting of three non-redundant critical com- 
ponents CCl, CC2 and CC3, with individual probabilities of 
kill PK/H, ; PK/H, ; PK/H , respectively, and or set of 
two redundant critical components RCCl and RCC2 with indi- 
vidual probabilities of kill P 


K/Hp, 


and "K/BR, , respec- 
tively. Thus, the kill diagram is depicted on 


=) 


figure 3 for the first hit on the aircraft and the PK/H 


for the Cookie Cutter approach becomes 


> ~(L) 


K K/H as °K /H. + PK/H (29) 
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NX 
CCl Cc2 cC3 RCCL RCC2 NK1 
(KILL) (KILL) (KILL) (NO KILL) (NO KILL) (NO KILL) 


Figure 3. Aircraft Kill Tree Diagram, First Hit 


In order for the A/C to be killed by the second hit, one 
must assume that it survived the first hit, and therefore 
only the RCC1, RCC2 and NK1 branches will be affected by 
the second hit. Thus, the kill tree for the second hit 


alone is depicted on figures 4a, 4b and 4c. 


RCCL 


CCl CC2 CC3 RCCL RCC2 NK1 
(KILL) (KILL) (KILL) (NO KILL) (KILL) (NO KILL) 


Figure 4a. Aircraft Kill Tree Diagram, Second Hit Alone 
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RCC2 


ecl CC2 CC3 RCCL RCC2 NK2 
(KILL) (KILL) (KILL) (KILL) (NO KILL) (NO KILL) 


Figure 4b. Aircraft Kill Tree Diagram, Second Hit Alone 


CCl CC2 CC3 RCC1 RCC2 2 
(KILL) (KILL) (KILL) (NO KILL) (NO KILL) (NO KILL) 


Figure 4c. Aircraft Kill Tree Diagram, Second Hit Alone 


Thus, the probability of the A/C being killed by the second 


hit alone becomes 
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(2) _ (1) (2) (2) (2) (2) 
Py = “$%., * wa + P + P + P 


o{- 


(1) (2) (2) (2) (2) 
Pk/H ao * Pea, + Pk /H, + P + Pp 


(1) (2) (2) 
‘amelie ; (Petty a *k/H po 


(1) 


(30) 


where Pe is the probability that all of the critical 
components survived the first hit (the NKl branch). Thus, 
the total probability of kill for the two hits ea © 
becomes 


(2) — » 7(1) (2) (34) 
P = P. ta 


One could go on to the third and subsequent hits in a 
Similar manner, and the PK/H will be increasing as more 
and more terms are added for the subsequent hits. 

Another method of computing the total probability of 
kill is the transition matrix method [2]. Using that 


method on the following example aircraft, one can clearly 


see the effect of redundancy on the PK /H : 
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A/C #1 (NO REDUNDANCY) 


CRITICAL COMPONENT Ap, (ft km, _(£e) 
Pilot 5 10 5 
Engine 30 18 24 
Fuel Tank 40 6 24 
Controls 25 6 15 


Total aircraft area present to the threat propagator is 


assumed to be A, = 500 ft? , and AD, is the area pre- 
sented by the ith component, Pk/n, is the probability of 
ith component given a hit on the ith component, and AL 
is the vulnerable area of the ith component. The : 


logical kill expression for this aircraft will be 


A/C KILL = PILOT.OR.ENGINE.OR. FUEL.OR. CONTROLS 


A/C #2 (25% REDUNDANT) A, = 500 ae 


CRITICAL COMPONENT A (£t*) P A (£t*) 

on k/nh. Ve 

i 1 1 

Pilot 5 1.0 5 
Engine 30 8 24 
Fuel Tank 40 6 24 
Controls I 12.5 6 72.5 
Controls II P25 6 Te 
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The logical expression for this aircraft is 


A/C KILL = PILOT.OR.ENGINE.OR.FUEL.OR. (CONTROLI.AND.CONTROLIT) 


A/C #3 (46% REDUNDANT) A, = 530 £t* 
CRITICAL COMPONENT A, (£t°) PL /h,; A. (£t*) 
i i 
Pilot 5 1.0 5 
Engine I 30 aS 24 
Engine II 30 8 24 
Fuel Tank 40 6 24 
Controls 25 6 15 


The logical kill expression for this aircraft is 


A/C KILL = PILOT.OR.FUEL.OR.CONTROLS.OR. (ENGINEI.AND. 


ENGINEIIL) 
A/C #4 (77% REDUNDANT) A, = 530 £t* 
CRITICAL COMPONENT A, (ft) - Mi Ay, (0) 
i i a 
Pilot 5 1.0 5 
Engine I 30 8 24 
Engine II 30 8 24 
Fuel Tank I 20 3 10 
Fuel Tank II 20 25 10 
Controls 25 - 6 AGS) 


The logical expression for A/C #4 is 
A/C KILL = PILOT.OR.CONTROLS.OR. (ENGINEIL.AND.ENGINEII). 


OR. (FUELI.AND.FUELITI) 


a 





TABLE 1 


CUMULATIVE PROBABILITIES OF KILL FOR EXAMPLE AIRCRAFT 


A/C #1 A/C #2 A/C #3 A/C #4 
> 1360 1060 0830 0377 
p,~ '2) 2535 . 2012 wiese 0788 
> 3550 2866 2397 1220 
._ 4227 . 3633 3117 1662 
_ 5185 . 4320 3788 07 
p,~ (6) 5840 4934 4411 2548 
, oi 6406 5485 4984 2981 
p,~ '8) 6895 5978 5508 . 3403 
ik 7317 6418 5986 . 3809 
— . 7682 6811 6419 4199 


Figure 5 compares the Py for the nonredundant aircraft #1 


with redundant aircraft #2, 3 and 4. 
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9 A/C#1 
A/C#2 

A/C#1 
A/C#3 


A/C#4 A/C#2 


A/ 


A/C#é 


1 2 3 4 5 6 7 8 9 10 
# of hits 


FIGURE 5. CUMULATIVE PROBABILITY OF KILL VERSUS NUMBER OF 
HITS 
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Note that the values of A, and Ph are assumed, 


i a 
while the values of AL are computed through the equation 
i 
Ae =ehm, SP (32) 
es! games 


Through the use of the transition matrix method (see 


Appendix B), the values of oy 


for the example aircraft 
have been found and are presented in Table l. 

As can be very easily seen from Table 1, the PL for 
the same shot decreases, as the redundancy of the example 


aircraft increases. 
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V. AFATL POOL COMPUTER PROGRAM AND THE Px i 


As shown by the previous chapters, the determination of 
the survivability of an aircraft can be a very complex and 
time consuming task. ‘Thus, the aid of the computer has been 
employed, and several programs have been developed by both 
the military and the civilian industry. One that was 
selected for use by the Joint Technical Coordinating Group 
for Aircraft Survivability (JTCG/AS) Survivability Assessment 
Subgroup, is the Antiaircraft Artillery Simulation Computer 
Program, AFATL Program POO]. This program is currently in 
use at the Naval Postgraduate School and is the one that 
this study will be concerned with. 

Many modifications have been made to the POOl that was 
Originally developed by the Weapons Systems Analysis 
Division of the Air Force Armament Laboratory at Eglin Air 
Force Base, Florida. The latest version of it used by Naval 
Weapons Center, China Lake, employs an aircraft consisting 
of twenty (20) critical components and computes the single 
shot probability of kill of a target (after consideration 
is given to various errors in predicting an aircraft/ 
projectile intercept point). Computation of the Piss is 
performed throughout the entire flight path and after the 


accumulation of all shots, the total probability of target 
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attrition is presented. In the computation of the cumulative 
P, , redundancy of the critical components has not been 
taken into consideration. This is a potential source of 
error in the final results, since the majority of the 
present aircraft have some degree of redundancy. 

In the latest version of POO], the computation of the 
single shot probability of kill is performed in the “FIRE" 
section of the program. The equation used to compute the 
probability of killing, at least one critical component by 
a single round, Py , 1S presented on line 717 of the 


program listing given in Appendix C, and it states 


PK = PK + PKS(IJ) - PK*PKS(IJ) = PK + PKS(Ig)*(1 - PK) 


where the initial value of Py is set to zero and Pes (IJ) 
is the probability of killing component IJ by a single 
round. This equation does not account for redundancy 
because component IJ might be redundant in the aircraft 
and killing it will not constitute an aircraft kill, as it 
was discussed in Chapter 3. Thus, in order for the program 


to account for possible redundancy of components, the 


following changes and additions to POOl1 are recommended. 
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IJ23 = 


IJ33 = 


IJ24 = 


IJ34 = 


IJ44 = 


the total number of non-redundant components 

the total number of sets of two redundant components 
of which two must be killed for a subsystem kill 

the total number of sets of three redundant components 
of which two must be killed for a subsystem kill 

the total number of sets of three redundant components 
of which three must be killed for a subsystem kill 

the total number of sets of four redundant components 
of which two must be killed for a subsystem kill 

the total number of sets of four redundant components 
of which three must be killed for a subsystem kill 

the total number of sets of four redundant components 


of which four must be killed for a subsystem kill 


Thus, IJ = IJ1+2*(IJ22) +3* (IJ2 3+IJd 33) +4* (IJ24+IJ34+1544) < 20 
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Define: 


MN (I) = A column matrix containing the numbers of the non- 
redundant components (I=1,IJ1) 
M22(I,J) = A (IJ22x2) matrix containing the IJ22 pairs of 
redundant components (I=1l1,IJ22, J=1,2) 
M23(I,J) = A (IJ23x3) matrix containing the IJ23 sets of 
three redundant components (I=1,1IJ23, J=1,3) 
M33(I,J) = A (IJ33x3) matrix containing the IJ33 sets of 
three redundant components (I=1,1J33, J=1,3) 
M24(I,J) = A (IJ24x4) matrix containing the IJ24 sets of 
four redundant components (I=1,IJ24, J=1, 4) 
M34(I,J) = A (IJ34x4) matrix containing the IJ34 sets of 
four redundant components (I=1,1J34, J=1,4) 
M44(I,J) = A (IJ44x4) matrix containing the IJ44 sets of 


four redundant components (I=1,1J44, J=1,4) 
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The user must create a file containing the number of the 
non-redundant components, then redundant components them- 
selves, the number of the IJ22,1J23,1J33,1J24,1334,1J44 sets, 
and the numbers of the components that belong to each set as 


shown below: 


om rm 
et ~N 
Fo a a a NN NE OP 
o™~ tN et AN NN eNO 
fae es & a eo 
oN PN = ieee) da odds etc. (max # of 
a a Nee! “ee! 
ave Saagag Fy oy a GT ag characters = 38) 
ae anes Seugsss 


e 
e 
© 
e 
o 

) 


. i100 2*1522 "381523 
Once the file is constructed, the MN,M22,M23,M33,M24,M34,M44 
matrices can be read, with the following routine: 
READ (2,*) (TEMP (I) , I=1, 38) 
I=1 
IJ1=TEMP (TI) 
IF IJ1=0 GO TO 6 
DO 5 K=1,IJ1 
MN (K) =TEMP (I+K) 
5 CONT 
6 I=1+IJ1+1 
IJ22=TEMP (I) 


IF IJ22=0 GO TO 10 
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LS 
10 


Z5 
20 


33 


DO 15 K=1, IJ22 
M22 (K, 1) =TEMP (I+K) 
M22 (K,2) =TEMP (I+K+1) 
I=I+2 

CONT 

T=2+IJ1+2*IJ22+1 

IJ2 3+TEMP (TI) 

IF IJ23=0 GO TO 20 

DO 25 K=1,1IJ23 
M2 3(K,1) =TEMP (I+K) 
M2 3(K,2) +TEMP (I+K+1) 
M2 3(K, 3) =TEMP (I+K+2) 
I=I+3 

CONT 

T=3+IJ1+2*IJ22+3*1J2 3+1 

1J33=TEMP (TI) 

IF IJ33 = 0 GO TO 30 

DO 35 K=1,1IJ33 
M33(K, 1) =TEMP (I+K) 
M33(K,2) =TEMP (I+K+1) 
M33(K, 3) =TEMP (I+K+2) 
I=I+3 


CONT 


40 


30 [=4+IJ1+2*IJ22+3*IJ2 3+3*1I333+1 
IJ2 4=TEMP (TI) 
IF IJ24=0 GO TO 40 
DO 45 K=1,1J24 
M2 4(K, 1) =TEMP (I+K) 
M2 4(K,2) =TEMP (I+K+1) 
M2 4(K, 3) =TEMP (I+K+2) 
M2 4(K, 4) =TEMP (I+K+ 3) 
I=I+4 
45 CONT 
40 J=54+IJ1+2*1J22+3*IJ2 3+3*1I933+4*IJ2 441 
IJ34=TEMP (T) 
IF IJ34=0 GO TO 50 
DO 55 K=1,1J334 
M34(K,1)=TEMP (I+K) 
M34 (K,2) =TEMP (I +K+1) 
M34(K,3)=TEMP (I+K+2) 
M34 (K, 4) =TEMP (I+K+ 3) 
I=I+4 
55 CONT 
50 I=6+IJ1+2*IJ22+3*1II2 3+-3*1I33+4*I524+4*1I334+1 
IJ44=TEMP (T) 


IF IJ44=0 GO TO 60 
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DO 65 K=1,1J44 
M44 (K,1) =TEMP (I+K) 
M44 (K,2) =TEMP (I1+K+1) 
M44 (K, 3) =TEMP (I+K+2) 
M44(K,4)=TEMP (I+K+3) 
I=I+4 
60 STOP 


END 


Once the matrices have been constructed, the following 
subroutine could be used to compute the cumulative prob- 
ability of aircraft survival. The cumulative probability 
of kill of each of the components (CPKS(IJ)) is computed 
at line 722. This probability is computed for all of the 
components in the DO to 460 loop. Immediately after the 
460 loop (before line 72) a call to the following sub- 
routine should be made. The parameter computed by this 
subroutine is the probability the aircraft has survived 
the encounter up to the current time, PS , the cumulative 
probability of survival. Note that the PK and PS 
computed at lines 717, 727, and 732 are no longer valid 


when redundant components are introduced. 
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PS=l. 
IF Idgl=0 GO TO 10 
DO 5 kK=l1,IJ1 
L=MN (K) 
PS=PS* (1.-CPKS(L) ) 
CPKS is the cumulative probability of survival of the 
component 
5 CONTINUE 
10 IF IJ22=0 GO TO 20 
DO 15 K=1,1Jd22 
=M22(K,1) 
M=M22 (K, 2) 
PS=PS* (1.-CPKS(L) *CPKS (M) ) 
15 CONTINUE 
20 IF IJ23=0 GO TO 30 
DO 25 K=1,1Id23 
L=M23(K,1) 
M=M2 3 (K, 2) 
N=M23 (K, 3) 
PS=PS* (1.-CPKS (L) *CPKS (M) —CPKS (L) *CPKS (N) 
-CPKS (M) *CPKS (N) +CPKS (L) *CPKS (M) *CPKS (N) ) 


25 CONTINUE 
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30 


35 
40 


45 
50 


IF IJ33=0 GO TO 40 


DO 35 K=1,1IJ33 


L=M33(K,1) 
M=M33(K, 2) 


N=M33(K, 3) 


PS=PS* (1.-CPKS (L) *CPKS (M) *CPKS (N) ) 


CONTINUE 


IF IJ24=90 GO TO 50 


DO 45 K=1,1J24 


* 


* 


L=M24 (K,1) 
M=M24 (K, 2) 
N=M24(K, 3) 


I=M24 (K, 4) 


PS=PS*(1.-CPKS (L) *CPKS (M) -CPKS (L) *CPKS(N) -CPKS (L) 


*CPKS (I) -CPKS (M) *CPKS (N) -CPKS (M) *CPKS (TI) 


-CPKS (N) *CPKS (I) +CPKS (L) *CPKS (M) *CPKS (N) 


+CPKS (L) *CPKS (M) *CPKS (I) +CPKS (L) *CPKS (N) 


*CPKS (I) +CPKS (M) *CPKS (N) *CPKS (I) +CPKS (L) *CPKS (M) 


*CPKS (N) *CPKS (T) ) 


CONTINUE 


IF IJ34=0 GO TO 60 


DO 55 K=1,1J34 


L=M34(K,1) 
M=M34 (K, 2) 
N=M34 (K, 3) 


I=M34(K, 4) 
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PS=PS* (1.=-CPKS(L) *CPKS (M) *CPKS (N) -CPKS (L) *CPKS (M) 
*CPKS (1) ~CPKS (L) *CPKS (N) *CPKS (I) -CPKS (M) 
*CPKS (N) *CPKS (I) +CPKS (L) *CPKS (M) *CPKS (N) 
*CPKS (I) ) 
55 CONTINUE 
60 IF I1344=0 GO TO 70 
DO 65 K=1,1044 
L=M44 (K,1) 
M=M44 (K, 2) 
N=M44 (K, 3) 
I=M44 (K, 4) 
PS=PS* (1.-CPKS (L) *CPKS (M) *CPKS (N) *CPKS (I) ) 
65 CONTINUE 
70 WRITE (6,100) PS 
100 FORMAT ('l, . 'THE CUMULATIVE PROBABILITY OF SURVIVAL IS, 
F9.7) . 
RETURN 


END 
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WI. CONCLUSIONS 


The probability of kill of an aircraft given a single 
shot is a linear function of the aircraft's vulnerable area. 
Redundancy of critical components greatly enhances the 
probability of survival and in the Cookie Cutter approach 
the kills of redundant critical components are mutually 
exclusive events, where as in the Carleton approach they 
are not. For an aircraft, hit by multiple shots the 
cumulative probability of kill for the same shot decreases 
as the redundancy built into the aircraft increases. The 
modifications proposed in Chapter V should provide a 
Significant improvement in the overall efficiency of the 
Antiaircraft Artillery Simulation Computer Program, since 


it will provide for aircraft redundancy. 
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APPENDIX A 


EVALUATION OF EQUATIONS 


(1) Evaluation of equation (12} 








is r r? 
Puss -| (1) * 5 OP (- Ey jer (1) 
ej 
O 
r2 
Using integration by parts, let a ae) 
20 
Differentiating results in - +5, dr = 
20 
Therefore 
r? : 
Pesg = |- exp(u) du = - exp (- =) 
O 
O 
2 
tv 
- exp (- 5) - (-1) = l- exp - 
20 
Since A_ = Ir 2 > =P =l-e = 
Vv Vv: KSS *P 
(2) Evaluation of equation (13). 
0g r 
Pxss -| has (- Zz) * ex ( - =) ar 
ej 20 r 
fe) Vv 
-| =z exp - r** ( +, + 1) |e 
S 20 ry 
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Using integration by parts, let - x? (4, + a 


Differentiation yields - 2r (+; + — dr = du 
20 8 





Vv 
therefore 
1 *v 
set egy BAe 
20° (——=~ + —r) 
20° r 
Vv 
or 
i “v 
<5. 2. =i. oP wv 
20 (5 + —s) A 
20 ry 
Vv 
2 1 ale a ( 1 1 
an | a 2, +4,)]] 
—r Fi Oo r 
20 r Ms o 
V 
1 “ 
So i- 6+1/ = —," and for 
Ll + =o. tT, + 20 
ry 
a 2 
A, = Tr 
A /2t 
V 2 
a7 + 20 
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(3) Evaluation of equation (14). 


Puss -| | eg (esa) Py (0 dxdy 


1 7 (x-p) * (y-u_)* 
Py * dro, a, oP -3(|— + Sy 





sar mee Se, = ae 
2 2 

1 x 
Pp = ex | - 3 |(s = > om I 
K/H 2 (a) (ao) 
Thus 

1 1 {/X~-u Yuu 
PKSS | | 270. 0 ew {- 3h) «(5 )|| 


2 2 
1 y 
7 ¥y 
Expanding and combining terms yields, 
2 


of a) -(&)) 


— tA 
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2u 
+(—y + +," “(3 y | dxdy 
0} 0 
Yq Y2 


Separating variables and making substitutions yields, 


ow f-Ge) «()]} 


os) 2710. 0 


°°) 


-| exp [- py tatag, 12x exp[- py?*y*+ay *y ]dy (2) 








a.) are?) 
where 
7 l 1 
Px ~ 2 . a sz 
3) "72 
aed 1 l 
Py a2 ( 2 Bs 3) 
0} 0} 
a) Y) 
= 
x °y. 
u 
gq = > ae 
Y oj 
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Integrating each integrand I, 


i. a sn k = > 2* 2 
I, -| exo P, x tq, <}ax -| exp | \P. x —d, 


w= CO 








il 
3 
a 
J Q 
ow IX 
NO 
“—_eer” 
Cae, 
8 
3 
(eee! 
§ 
> 
4 e) 
ra 
* 
* 
| 
NO 
3 
*% 
“eee” 
en ee 





oak. 


and I, yields 




















let uri = 52° then du = —— dz and 
¥2 
2 — 
yz | om {- 2} au = or 
cae 
CO 2 am 
| exp { - u \qus/7 
2 . 
ia x = 
therefore I, =exp yz * 5 * /7T or 
4p x 
x 2 
Ux 
5 2 
17 *9 
a = exp 
Ll Rn 1 4 lj 1 + 1 
a i) amy} Zia 2 2 
oy Oy Oo, ier 
1 2 B 2 
—_ 2 
VT Ux 
x =<. 2 
= + , oy + a 
2 2 2 *( 2 1 
oO o 20 
x x x 2 2 
1 2 oe, CL 
L 2 
i 2 2 
Y20 oo Hy Tx, 
I, = exp ia 3 ae 
2 2 20 ( +o 
Px. voy Xo xy xX. 
x 
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Similarly 


oO 
: Ae Y9 | By oe 
= e 7 a, ka 
Y 20 ( +o 
> 
‘ae Se Y2 \ ¥y ¥2 


Substituting I, and I, into equation (2) yields 

















or 


_ nS 
* em |- [re * | 

eo} + C- CO + OC ‘ 

sia %9 Yy Yo 
If we assume that o = 090 and A = 2t0_ oa 

SL Yy ‘ ee | 
the Press becomes 
A /2T 
Pxss = —— 
a) fre: 
Xo 27 Y> 27 
2 : 2 
“ ie x y 
ox | >| ad | 

ee oe 

Xo 27 Y> 27 
or 

A /27 
Pxss = 4 
A A 
os NG = 
x oT oT 
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APPENDIX B 
CALCULATIONS THROUGH THE TRANSITION MATRIX METHOD 


TABLE 2 


Probability of Transitioning from this State to this S tate 


Computation of the Transition Matrix (T) for Example A/C #3 
Knre Krel Krc2 Kre Nk 
7 5+244+15 5+24+15 0 5+24+15 Knre 
530 5 30 530 
0 2 4+438 0 0 24/530 Krel 
530 ’ 
37 86g 0 244438 0 24/530 Kre2 
| 5 30 
| 0 24/530 24/530 1 0 Krce 
| 0 0 0 0 438/530 Nk 
| 


' (Note that the sum of each colum is unity.) 


Now, let the probability that the aircraft exists in each of 
of the five possible states after the jth hit be expressed 


by a vector {Ss bd , where 


Knrc (3) 


cP Krc2 
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The probability that the aircraft is in each of the five 


states after the (j+1l1)th hit is 


aor 7 [T]{s} {9 (B-1) 


that is, the aircraft transitions from {s }{9) to {s {3th 
to [T]. Thus, the cumulative probability the aircraft is 


(j+1) 


killed after j+l hit, P, , is given by 


BH) 2 enre(St) 4 ere (St) 


Prior to the first hit, the aircraft is entirely in the Nk 


State. Thus, according to equation (B-l), 


~ (9) 


0 
0 
js} = [T]{s}° = [T] 4 0 
0 
1 / Nk 
and hence, 
/ 44/530 i 0830 A Bie 
24/530 .0452 
{att 24/530 ™ 0452 
0 0 €—Kre 
438/530 8264 





Thus P. ‘= .0830. 
1 
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Similarly, for the second hit, 


(1) 
—.0830 
.0452 
{s\? = [T]{s}* = [T] < .0452 
0 
. 8264 


530 *44+44%*2 4+ 44*24+44%* 438 


462*2 4+24* 438 
(2) =@ i ! 
{s} = ——5 { 462*24+24*438 
5 30 
24*244+24*24 
438*438 
(2) 
-1591 €—— Knrc 
.0769 
{s }{2) PF i 

0041 €—Kre 
. 6829 


Thus, after the second hit 


Ps -1591 + .0041 


Similarly, the values for P. 


K 


(3) , wy , etc., are 


obtained to yield Table l. 
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703 
704 
705 
706 


707 
708 


709 
710 
711 
712 
713 
714 


715 
716 
717 
718 
719 


CC 


CC 


CC 


CC 


CC 


APPENDIX C 


P0Q1 'FIRE' SECTION 


COMPUTE SURVIVAL AND KILL PROBABILITIES 


STUFF=DIVIDE (BXF2, (SXF2+AVTPI) )+DIVIDE 


(BYF2, (SYF2+AVTPI) ) 
PKS(IJ) IS THE PROBABILITY OF KILLING COMPONENT IJ 
BY A SINGLE ROUND 


(ONE BARREL) 


PKS (IJ) =AMIN1 (1.0, DIVIDE (EXP (~.5*STUFF) *AVTPI, 


SQRT ((SXF2+1AVTPI) *(SYF2+AVTPI) ) ) ) 


PK IS THE PROBABILITY OF KILLING AT LEAST ONE 


COMPONENT BY A SINGLE 


ROUND (ONE BARREL) 


PK=PK+PKS (IJ) -PK*PKS (IJ) 


CPKS(IJ) IS THE CUMULATIVE PROBABILITY OF KILLING 


COMPONENT IJ 
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720 


721 
722 
72 3 
724 
725 


726 
727 
728 
729 


730 
731 
He2 
733 
734 


CC BY THIS GUN LOCATION FOR THE ENTIRE AIRCRAFT FLIGHT 


PATH 

Cc 
460 CPKS (IJ) =CPKS (IJ) + (l=(1-PKS (IJ) ) ** ISB) —(CPKS (IJ) * 
*(1-(1-PKS (IJ) **ISB) ) 

Cc 


CC PS IS THE PROBABILITY OF ALL COMPONENTS SURVIVING 


ISB BARRELS FIRING 


PS=(1.0-PK) **ISB 
Cc 
CC PK IS THE PROBABILITY OF KILLING AT LEAST ONE 
COMPONENT BY ISB 
CC BARRELS FIRING 
Cc 
PK=1.0-PS 


TI=TIME+T 
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